Loan App Harassment India 2026 — 11 Steps to Recover

You took a small ₹2,000–₹50,000 loan from an instant loan app. Now agents are calling your contacts, threatening your family, morphing your photos and demanding 5x the amount. You are not alone — MeitY has blocked several batches of illegal lending apps under §69A of the IT Act, and the Reserve Bank of India's Digital Lending Guidelines (2022), consolidated in the Digital Lending Directions, 2025, make most of these app practices a violation. This is exactly what to do, in order, starting in the next 60 minutes.

• First action — within 60 minutes: stop paying. Save every screenshot (chats, threats, morphed images). Block UPI auto-debit at your bank.
• Within 24 hours: file at https://cybercrime.gov.in (NCRP) under Loan App Fraud. Dial 1930 for active financial loss.
• Within 48 hours: file an FIR at the cyber police station — citing IT Act §66C / §66D / §67, BNS §351 (criminal intimidation), §75 (sexual harassment via cyber means), and §318 (cheating).
• Within 7 days: complain to RBI Sachet at https://sachet.rbi.org.in (free, online).
• Free legal aid: NALSA helpline 15100 + your District Legal Services Authority (DLSA).
• You do NOT owe illegal charges: an unauthorised app loan that violates the RBI Digital Lending Directions is recoverable as illegal — you must repay only the principal actually credited, not exorbitant interest, processing or “recovery” fees.

1. Stop paying. Every rupee you send confirms compliance and worsens harassment.
2. Take screenshots of every call log, message, threat, morphed image, group chat. Save to cloud + a separate device.
3. Block UPI auto-debit / e-mandate — call your bank, ask to revoke the e-mandate registered against the loan app's VPA.
4. Revoke app permissions — uninstall the app, then in phone Settings → Apps → the app → Permissions → revoke contacts/storage/SMS/camera. Run Google Play Protect scan.
5. Switch off “Install unknown apps” for any browser / file manager that allowed the APK.
6. Dial 1930 if money was deducted in the last 7 days. Get a complaint number on the spot.
7. File at cybercrime.gov.in — choose Financial fraud → Loan app fraud — within 24 hours of harassment.
8. File FIR at the nearest cyber police station within 48 hours. Carry: ID proof, bank statement, screenshots.
9. File at RBI Sachet (https://sachet.rbi.org.in) → Unregulated Lending Entity.
10. Report Play Store / App Store listing: Play → app page → ⓘ → Flag as inappropriate → Harmful or unsafe.
11. Notify your contacts — send a one-line WhatsApp blast: “I'm being harassed by a loan app fraud. If you receive any abusive call about me, ignore it. FIR filed.”

Loan app harassment is the systematic intimidation by unauthorised digital lenders — most of them not registered with the RBI as NBFCs or as Lending Service Providers (LSPs) of an NBFC — using illegal practices the RBI's Digital Lending Directions, 2025 specifically prohibit:

• Contact-list harvesting without consent (banned outright).
• Calling your contacts to publicly shame you (criminal intimidation under BNS §351).
• Morphing your photos with sexual / abusive content (sexual harassment under BNS §75 + IT Act §67).
• Threatening fake legal notices, fake court summons, fake police FIRs.
• Demanding 200-500% of the principal through “processing fees, GST, late fees, recovery fees” — most illegal.
• Auto-deducting via UPI e-mandate without explicit per-transaction consent.

The same app may operate under 5–10 names. The same fraudulent group rotates through Play Store using shell company names, fake GSTIN, fake “RBI partnership” claims.

• ₹2,000 disbursed → ₹8,500 demanded in 7 days. Then 4–8 calls per hour. Photos morphed.
• Fake “company HR” call to your office — claims you are absconding from a loan.
• Telegram group of 50+ family/colleagues created with your photo + “fugitive” caption.
• Multiple apps from the same backend — you pay App A, App B starts harassment from “another lender”.
• Suicide risk is real: loan-app extortion has been linked to numerous suicides reported from Andhra Pradesh, Telangana, Maharashtra and Tamil Nadu since 2022. If you feel suicidal, help is listed at the end of this page.

• Loans must be disbursed directly into the borrower's bank account by a regulated entity (RE) — Bank, NBFC or co-operative bank.
• Recovery agents cannot harass the borrower's contacts.
• Pass-through accounts are banned — money cannot flow through a third party.
• APR (effective interest rate) must be disclosed up-front. Hidden charges are violations.
• Cooling-off / look-up period during which interest cannot be charged — borrower can exit without penalty.
• Default register check before disbursement.

Source: RBI Circular DOR.CRE.REC.66/21.07.001/2022-23 dated 2 Sep 2022, consolidated in the Reserve Bank of India (Digital Lending) Directions, 2025.

• §318 (Cheating) — fake interest, hidden charges; §318(4) carries up to 7 years.
• §308 (Extortion) — demand under threat → up to 7 years.
• §351 (Criminal intimidation) — threat calls, public shaming → up to 2 years.
• §356 (Defamation) — morphed images, false WhatsApp groups.
• §75 (Sexual harassment) — sexually coloured threats / morphed nudes → 3 years.

• §66C — identity theft → 3 years + ₹1 lakh.
• §66D — cheating by impersonation through computer → 3 years + ₹1 lakh.
• §66E — privacy violation (photo morphing without consent) → 3 years + ₹2 lakh.
• §67 — obscene material publication → 3 years + ₹5 lakh.
• §67A — sexually explicit material → 5 years + ₹10 lakh.
• §69A — power under which MeitY blocks illegal apps.

• Fraudulent service → District Commission complaint (under ₹50 lakh) via e-Jagriti (the portal that has replaced e-Daakhil) — filing is free.
• Unfair Trade Practice under §2(47) — covers misrepresentation of charges.

• Contact harvesting without consent is a personal data violation — penalty up to ₹250 crore on the data fiduciary.
• Complaint at Data Protection Board of India (when fully notified) or DPO of the lending entity.

• MeitY has blocked multiple batches of illegal lending apps under §69A IT Act — including 94 lending apps in February 2023 on the recommendation of the Ministry of Home Affairs.
• Latest lists: Press Information Bureau (https://pib.gov.in) + MeitY portal.

1. Switch the phone to airplane mode for 30 minutes. The harassment stops temporarily — gives you space.
2. Open a notes app. List: app name(s), download source (Play / APK), date borrowed, principal, repaid so far, today's demand, agent numbers.
3. Take a clean screenshot of every demand SMS, every call log, every threat. Use a screenshot organiser → folder named “loan-app-evidence-[date]”.

1. Block UPI auto-debit / e-mandate: Open BHIM / GPay / PhonePe → Mandates (or Auto-pay) → cancel any registered mandate. Call your bank's helpline → ask for a written confirmation that all e-mandates against [app name] are revoked.
2. Block the agent number — at phone level (Settings → Phone → Block), and register your number on TRAI's DND / Tafcop registry to cut further promotional / spam SMS.
3. Do NOT repay even if they say “we will stop calling after this last instalment”.

1. NCRP (cybercrime.gov.in) — register a Loan App Fraud complaint. Use Report & Track. Save the Acknowledgement Number.
2. 1930 helpline — for active money loss in last 7 days.
3. Local cyber police station FIR under IT Act §66C/§66D/§67 + BNS §318/§351/§75.
4. RBI Sachet — file at https://sachet.rbi.org.in. Choose Unregulated Lending Entity. RBI will issue a written advisory to the bank that lent.

Send a single, factual WhatsApp / Telegram broadcast to your contacts:

“I have been targeted by an illegal loan app. Their agents may call you with false information and morphed images. Please ignore. I have filed an FIR + RBI Sachet complaint. — [Your name]”

This disarms shame attacks before they land.

1. Consumer complaint at e-Jagriti (https://e-jagriti.gov.in, the portal that replaced e-Daakhil) — claim refund of all illegal charges + compensation for harassment.
2. CIBIL dispute: if the loan was reported to credit bureaus, dispute it at https://www.cibil.com → Online Dispute. Cite the RBI Digital Lending Directions violation.

File RTIs to track enforcement of YOUR complaint:

• To RBI — Status of action taken on Sachet complaint number [X] dated [Y] against [App name]; copy of advisory sent to the lending bank.
• To MeitY — Whether [app name + package] is on the §69A take-down list; if not, action plan and date.
• To local police — Status of FIR [number] dated [Y]; investigating officer; date of next investigation step.

Use the AI RTI Drafter — describe your case and it produces the right RTI application.

1. Paying “just one more time” to make it stop. It never stops. Each payment confirms vulnerability.
2. Shouting / threatening on call. Your shouting can be used against you. Stay polite, document.
3. Deleting the app immediately. First, screenshot the full agreement, then revoke permissions, then uninstall.
4. Telling agents you “filed FIR”. They escalate before the FIR is registered. Tell them only after you have the FIR copy.
5. Trusting “recovery agents” on Telegram. They are second-stage scammers — never legitimate.
6. Ignoring CIBIL hit. Dispute fast — illegal loans must be reversed.
7. Using the same UPI / phone number to take a fresh loan. Your phone is on a fraud network — change SIM if persistent harassment.
8. Skipping RBI Sachet. It is the fastest route to bank-level intervention.

You must repay the principal if it was credited to your bank. You do not owe illegal interest, processing fees, or “recovery fees” that violate the RBI Digital Lending Directions. After RBI Sachet adjudication, an order can be passed for full reversal including the principal in cases of unauthorised lending.

Open https://www.rbi.org.in → Sitemap → NBFCs Registered — search by app name + corporate name. Or use https://sachet.rbi.org.in → Check entity. If absent, the app is unregulated. Report it.

They cannot legally — IT Act §66E + §67 + BNS §75 + §356 make this a serious crime. They can technically broadcast to your contact list because the app harvested it. The remedy: file FIR fast (the criminal exposure stops most agents) + send the disarming WhatsApp to your contacts.

If reported, yes — but you can dispute and reverse it. File a CIBIL dispute citing the RBI Sachet complaint number + FIR. Under the Credit Information Companies (Regulation) Act 2005, bureaus must investigate and resolve disputes within 30 days.

Loan-app extortion has driven numerous victims to suicide since 2022. If you feel suicidal: dial iCall 9152987821 (Mon–Sat) or Vandrevala 1860-2662-345 (24×7, free), or the government's Tele-MANAS / KIRAN helplines. You are a crime victim, not a debtor.

No. The harassment is the crime, not the loan. Show your employer the FIR + RBI Sachet complaint. If pressured, file with your State Labour Commissioner.

Doesn't matter. The directors of the listed shell company are personally liable under Companies Act §166 + §447. Police can trace via the bank account that received your repayments. NCRP is the route — they coordinate with banks to freeze.

Under §173 BNSS, 2023, police must register an FIR for a cognisable offence (this replaced the old CrPC §154). If they refuse, approach the Magistrate under §175(3) BNSS to order investigation. Online FIR (e-FIR) is available in several states. Use an RTI to escalate if police delay beyond 7 days.

RBI cannot file an FIR — that is for the police. RBI regulates lenders. A Sachet complaint forces RBI to issue an advisory to the bank that disbursed to the app, which triggers internal investigation + reporting under the Suspicious Transaction Report (STR) mechanism + Enforcement Directorate referral if PMLA-relevant.

Yes — through the Consumer Court (District Commission) under Consumer Protection Act §2(47) as Unfair Trade Practice. Compensation varies with the duration and visibility of the harassment. Filing is free at e-Jagriti.

Apps registered under an RBI-approved NBFC are the safer ones. Always verify the Lender disclosure on the app's loan agreement page — it must name a regulated entity. Cross-check any name against the RBI NBFC list and the Sachet “Check entity” page before borrowing.

Report the group within WhatsApp (Settings → Report). File at NCRP → Profile / impersonation / harassment. Under the DPDP Act, 2023, platforms and data fiduciaries have a legal obligation to act on non-consensual content once put on notice.

Yes — electronic records are admissible under §63 of the Bharatiya Sakshya Adhiniyam (BSA), 2023, accompanied by the certificate under §63(4) of the BSA (this replaced the old §65B of the Evidence Act, which was repealed on 1 July 2024). Keep the original recordings on a single dedicated device, unedited.

• Cyber Crime Complaint in India — full process
• UPI Fraud Recovery — Dial 1930 + RBI 3-day rule
• Credit Card Charges — every fee explained, RBI rules
• Loan Settlement (OTS) — RBI process + CIBIL cleanup
• Digital Arrest Scam — 7-minute rescue plan
• Consumer Court — file online via e-Jagriti
• Income Tax notices — when loan-app TDS hits

• RBI Digital Lending Guidelines (Sep 2022) — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12382
• RBI Sachet (unregulated lender complaint) — https://sachet.rbi.org.in
• National Cyber Crime Reporting Portal (NCRP) — https://cybercrime.gov.in
• MeitY ban orders (PIB releases) — https://pib.gov.in
• e-Jagriti (consumer complaint portal) — https://e-jagriti.gov.in
• CIBIL dispute portal — https://www.cibil.com/dispute
• NALSA helpline — 15100 (free legal aid).

Loan-app harassment is a crime, not a debt, and it can wear down even strong people. If you feel you cannot cope, call one of these free helplines before doing anything else: iCall 9152987821, Vandrevala 1860-2662-345, or the Government of India's Tele-MANAS (toll-free). Then come back to the steps above — report at cybercrime.gov.in, file an FIR, and file at RBI Sachet. You do not have to face this alone.

• Reserve Bank of India — Guidelines on Digital Lending, Circular DOR.CRE.REC.66/21.07.001/2022-23 dated 2 Sep 2022; Reserve Bank of India (Digital Lending) Directions, 2025.
• Ministry of Electronics and IT (MeitY) — §69A blocking orders, 2023 onwards.
• Bharatiya Nyaya Sanhita, 2023 — sections 75, 308, 318, 351, 356.
• Bharatiya Nagarik Suraksha Sanhita, 2023 — sections 173, 175(3).
• Bharatiya Sakshya Adhiniyam, 2023 — sections 63, 63(4).
• Information Technology Act, 2000 — sections 66C, 66D, 66E, 67, 67A, 69A.
• Consumer Protection Act, 2019.
• Digital Personal Data Protection Act, 2023.

Last reviewed: 17 July 2026.